OMNIPLEX (GROUP) LIMITED

Docebo - Learning Management System (LMS) - from Omniplex Learning

Docebo is a leading AI-powered learning management system (LMS) designed to deliver, manage, and measure online training at scale. It empowers public sector organisations with personalised learning experiences, robust analytics, and seamless integrations, enabling businesses to drive employee development, customer education, and partner enablement efficiently and effectively.

Features

• AI-Powered Learning – Personalised recommendations for improved learner engagement
• Gamification – Points, badges, and leaderboards to boost motivation
• Social Learning – Peer interaction through forums, discussions, and sharing
• Mobile Learning – Dedicated app for on-the-go training
• Advanced Reporting – Detailed analytics to measure learning effectiveness
• Integrations – Connect with CRM, HRIS, and productivity tools easily
• Multi-Audience Management – Deliver tailored experiences for different user groups
• E-Commerce – Sell courses online with built-in payment options
• Blended Learning – Combine virtual, classroom, and self-paced training seamlessly
• Delivered by Omniplex Learning your partners for all things learning

Benefits

• Boosts Engagement – Interactive tools keep learners motivated and involved
• Scales Globally – Supports multilingual training for worldwide teams effortlessly
• Improves Productivity – Streamlined learning reduces onboarding and training time
• Drives Retention – Personalised learning paths enhance knowledge retention significantly
• Saves Costs – Reduces classroom training expenses through digital delivery
• Enhances Collaboration – Social learning fosters knowledge sharing among peers
• Provides Insights – Advanced analytics inform smarter learning decisions
• Supports Compliance – Ensures regulatory training is tracked and completed
• Integrates Easily – Connects with existing business systems seamlessly
• Future-Proofs Learning – AI-driven platform adapts to evolving training needs

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at help@omniplexlearning.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

932115072004630

Contact

Andrei Grayson
08000 850550
help@omniplexlearning.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Creative

  Content services

  • Content Sharing and Collaboration Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Microsoft Windows 10 or higher; OSX (the last two major releases); Most Linux distributions (ChromeOS is not tested); Docebo strongly recommends that clients maintain updated operating systems (both desktop and mobile) aligned to the latest release made available by the respective vendor.; As of January 2018, Docebo does not support Safari on Windows.; As of November 2022, Docebo is not actively testing Firefox but still offers support for it.; JavaScript must be enabled; Third-party cookies must be enabled; localStorage must be enabled; TLS Version: 1.2
• System requirements:
  • Microsoft Windows 10 or higher
  • OSX (the last two major releases)
  • Most Linux distributions (ChromeOS is not tested)
  • IPadOS (the last two major releases)
  • Android 12.0 or higher

User support

• Email or online ticketing support: Yes
• Support response times: 2 business hours; Customers can raise tickets directly in the application outside of UK business hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Customer shall perform self-diagnosis of each incident and make a recommendation to Omniplex with regard to the severity level. Omniplex may re-categorise any incident based on additional information and shall communicate such re-categorisation to the Customer. Prior to reporting an incident, the Customer will have investigated and eliminated any internet or environment issues.; Cases are subject to established levels:; ; Urgent Critical: - production issue affecting all users, including system unavailability, with no workaround available.; ; High: Issue is persistent, affects many users and/or impacts core functionality or results in significant performance degradation with no reasonable workaround available.; ; Normal: Errors in functionality within the application, often accompanied by workarounds or affecting some but not all users.; ; Low:General inquiries on the use of the application; or cosmetic errors or incidents.; ; Urgent : 1 Business Hours first response. ETA- Within 5 Business Hours or within an agreed fixed time frame.; High: 1 Business Hours first response. ETA - As promptly as commercially feasible.; Normal: 2 Business Hours first response. As promptly as commercially feasible.; Low: 8 Business Hours first response. As determined by Omniplex Learning Support Team.; ; Outside UK business hours, organisations can raise urgent support tickets via the Docebo support portal.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Administrators are given access to a suite of onboarding eLearning that teaches them how to build and configure their system. Additionally, Omniplex Learning delivers a number of private training sessions to show and talk through the various components of the system. All training and the onboarding journey is focused around the agreed deliverables for the platform as stated in the Statement of Works.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Users can extract their User data by creating custom reports and exporting the data in CSV, PDF or HTML formats.
• End-of-contract process: Customer is given a set date by which they can extract their data to agreed timescales. Or they can pay for us to extract their data.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There is a dedicated app for use on mobile devices. ; hen accessing the platform from a tablet, there are two options: ; ; Use the tablet’s mobile browser to access the desktop version of your platform. This is supported for Android tablets with an 8” screen or larger and Apple iPads of all sizes.; On the mobile browser, you can access both administrator and learner views of the platform, however, only the learner functionality is fully supported.
• Service interface: Yes
• User support accessibility: WCAG 2.2 A
• Description of service interface: Docebo's 'pages' feature allows your designated administrator to compose pages using building blocks and create different menus for each audience. The administrator can create more than one menu and then associate them to user groups, branches, or levels. The admin can also add widgets to the home page based on the requirement.
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: The accessibility features of the Docebo platform, as declared in our Docebo Accessibility Conformance Report based on the VPAT, are tested in the following environments:; ; Operating systems: Microsoft Windows (tested with Chrome and Firefox) and macOS (tested with Chrome).; Keyboard navigation: We ensure full support for keyboard-only navigation.; Browser zoom: Accessibility is tested with zoom levels ranging from 100% to 400%.; Page reflow: We verify that pages reflow properly without requiring horizontal scrolling, even at high zoom levels.; Screen readers: Testing includes the use of the most used screen readers, NVDA, JAWS, and VoiceOver (VO), to ensure compatibility with assistive technologies.
• API: Yes
• What users can and can't do using the API: Docebo offers several native integrations as well as set of APIs allowing to integrate with other third-party tools.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The look and feel of the Docebo Learning suite is composed of a set of interface elements that the Super-administrator can customize to optimise the learning experience and the overall user experience of the platform, both on desktop and on mobile. These elements can be set globally, or for individual clients of the extended enterprise. By enabling the White Label app in the platform, you can hide some of Docebo's custom branding elements from view, meaning that users will be able to see your own custom branding (and nothing associated with the Docebo brand) inside of your platform. The app lets you customise the header and footer messages in your platform, hide certain buttons or areas of your platform from other Super-administrators, and replace the word Docebo with a custom word, among other options. The White Label app can only be managed by Super-administrators.

Scaling

• Independence of resources: Docebo is a SaaS-based LMS and is hosted on the Amazon AWS Public Cloud. Docebo uses a dedicated, state-of-the-art CDN. This CDN is a globally distributed network of servers that can replicate the static contents to a location (edge location) that is as close as possible to the final user’s location. This helps reduce latency and increase the speed of content navigation, as well as drastically increasing the concurrent supported users. Docebo offers both unlimited storage and unlimited bandwidth so there are no limits on scalability of the platform.

Analytics

• Service usage metrics: Yes
• Metrics types: Docebo LMS provide a wide range of training metrics including system usage, completion data, time spent, courses opened, course progression and number other reports.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Docebo

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export their data either in summarised dashboards or by custom reports that show individual training metrics.; API and also automated data exports can be used to export data in customers data lakes.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • API
  • SCORM
  • AICC
  • XAPI
  • HTML
  • MP4

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Unavailable/Unavailability means that all or the majority of the request for the Services are constantly timing out or failing with a server-side error code; and (b) with respect to unavailability of the configuration portal, that the portal is not available for log on for all end users. There shall be no unavailability because of (1) a failure of the customer to correctly configure the Services in accordance with the documentation and/or Omniplex’s instructions; (2) the unavailability of a specific web page; or (3) unavailability of one or more specific features while other key features remain available.; 1.Docebo has established the Services such that they will be available at least 99.9% of the time, measured monthly.; 2.If Docebo fails to achieve the availability percentage for two calendar months in any six month period, the customer shall be granted service credits in compensation. The value is calculated as percentage of the pro rata monthly charges paid by the Customer to Omniplex for Services under the applicable Order Form or SOW; 3.Omniplex will apply Service Credits to the Customer’s account. In the event there are no further Fees owing under the Agreement, Omniplex shall issue the Customer a refund within 90 days.
• Approach to resilience: The QA team tests new functionality and hot fix that the developers push into the codebase before they are deployed to a production environment. The standard QA review phase of the SDLC includes a suite of regression and security automated tests.; Unit testing is aimed at proving delivered code functions as designed and to verify that the application is resilient to potential issues outlined during threat modelling.; Security regression tests have combination of regression and security testing which ensures changes made to a system do not harm its security.; Manual code inspection, is performed where one member of the development team examines another developer’s code.
• Outage reporting: “Excused Outage” means, any Unavailability that is due to:; a. Planned downtime. Planned downtimes are downtimes that are scheduled during “Maintenance Windows”.; b. Emergency downtime. With respect to emergency downtime, Omniplex shall provide the Customer with as much notice as practical under the circumstances and strives to provide seventy-two (72) hours advanced notice. In all cases, Omniplex shall provide a minimum of twenty-four (24) hours’ advanced notice of emergency downtime. Omniplex shall make commercially reasonable efforts to schedule emergency downtime in off peak hours (based on the Customer’s business hours).; c. Force Majeure. Any Unavailability caused by a Force Majeure Event.; “Non Excused Outage” means anything other than an Excused Outage.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Docebo supports various methods of authentication, in combination with Docebo’s proprietary role-based permissions framework for handling authorization. Docebo also provides alternative authentication methods via diverse Single Sign On (SSO) modalities such as ADFS versions 2 and 3, LDAP, SAML, ad hoc secured authentication via token based signed URL, OKTA, Auth0, JWT).; By activating the SAML app in Docebo, users can log into their learning platforms using credentials from active sessions of other web platforms. Docebo offers two types of configuration procedures for the SAML integration, called Smart Configuration and Standard Configuration.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Docebo’s security framework is built on an Information Security Management System (ISMS) aligned with ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, and SOC 2 standards. Security responsibilities are shared with AWS, which provides physical and network security for data centres. Docebo enforces strict access controls, including IAM, password policies, and two-factor authentication. Data is logically segmented, encrypted in transit (SSL/HTTPS) and at rest (AES-256), and backed up with annual integrity tests. Personnel are vetted, trained, and bound by confidentiality, with access revoked upon termination.; Physical security includes alarms, CCTV, and 24/7 guards. Network security uses firewalls, intrusion detection, and DDoS protection. Vulnerability management, patching, and secure development lifecycle (SDLC) are in place, with annual penetration tests and audits. Incident management, business continuity, and disaster recovery programmes are regularly tested. Supplier management ensures third-party compliance, and customers may request audits or penetration tests. Full details and certifications are available at the Docebo Trust Center.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Docebo’s configuration and change management processes follow industry standards. All changes—such as maintenance, patches, deployments, or incident responses—are managed through a formal programme with defined roles and responsibilities. Changes are reviewed, tested, and approved before implementation, with development, testing, and production environments kept separate. Change management standards are based on established guidelines and tailored per request. A systematic approach ensures that changes are controlled, documented, and tracked, minimising risk and maintaining service quality. Annual audits and regular reviews ensure ongoing compliance and effectiveness. Full details are available in the Docebo Trust Center.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Docebo’s vulnerability management process involves continuous monitoring for vulnerabilities via vendor notifications, researcher reports, and scheduled internal/external scans and penetration tests. Identified vulnerabilities are assessed for risk and prioritised for remediation according to a formal change management policy. High-severity vulnerabilities (CVSS base score 7.0 or higher) are addressed promptly. Remediation actions are tracked and executed based on assigned priority. Annual vulnerability assessments and penetration tests are conducted by external experts, with reports available from the Docebo Trust Center. This systematic approach ensures ongoing protection and compliance with industry standards.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Docebo’s protective monitoring processes include system event logging and real-time monitoring to detect, investigate, and respond to suspicious activity. Logs are sent to a central repository and analysed using monitoring tools for potential security incidents. Logs are retained for one year or as required by law. The logging capabilities for each Docebo service are specified in the relevant documentation. These measures ensure timely identification and response to threats, supporting compliance and ongoing security. Full details are available in the Docebo Knowledge Base and Trust Center.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Docebo’s incident management process includes documented policies and procedures for identifying, responding to, remediating, and reporting incidents that impact service quality or data security. Incidents are logged in a ticketing system, assigned a severity rating, and tracked through to resolution. Escalation procedures guide response and mitigation activities, with root cause investigations conducted for each incident. Customers are notified of confirmed security breaches as outlined in contractual agreements. Regular reviews and updates ensure the process remains effective and compliant with industry standards. Full details are available from the Docebo Trust Center.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Users get a 14-day free trial with full functionality. They can configure, upload and enrol users just as they would in the live platform. If they want to purchase a licence, the trial version can be switched so they can keep the work they have already.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau Ltd
• ISO/IEC 27001 accreditation date: Friday 19 September 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 53ab0fea-01f2-482b-8742-5a47c61d2476
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 3d59562c-b54e-48e3-97ba-4426723f9f21
• Other security certifications: Yes
• Any other security certifications: Docebo, Articulate, Vyond all hold SOC2

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Volunteering opportunities for staff

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at help@omniplexlearning.com. Tell them what format you need. It will help if you say what assistive technology you use.